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DETAILED ACTION 

1 . This office action is in response to Applicant's amendment filed on July 5, 2005. 
No claims have been amended. Claims 1-34 are pending. 

Response to Arguments 

2. Applicant's arguments filed July 5, 2005 have been fully considered but they are 
not persuasive. In response to the arguments concerning the previously rejected claims, 
the following comments are made: 

The Applicant argues Blaker et al. (hereinafter Blaker) does not disclose "macro 
security operation". The Examiner disagrees and maintains the rejections. Blaker 
discloses a cryptographic accelerator processor comprising random number generator 
unit, encryption and decryption unit and a public key engine execution unit for carrying 
out operations by the host processor. (Page 3, paragraph 34) Blaker further discloses 
the cryptographic data processing system may be improved by providing separate 
command interfaces that are respectively associated with the execution units in the 
cryptographic processor. Command blocks may be provided and executed by the 
executions units in parallel using a plurality of functional units, thereby, increasing the 
total number of operations that may be performed and reducing the average latency for 
completing the operations (Page 1, paragraph 11). Blaker also teaches the 
cryptographic processor may distribute command blocks to the execution units. (Page 
7, paragraph 66) The Applicant in the disclosure defines "macro security operation" as a 
group of primitive security operations and "primitive security operation" as a decrypt 
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operation, an encrypt operation, a hash operation, or arithmetic operations for 
generating value. Therefore, Blaker anticipates "macro security operations" and the 
"primitive security operations" which is disclosed as performing encryption or decryption 
or random number generation by the cryptographic accelerator processor. Blaker further 
discloses the host processor loads a command into one of the command queue and the 
cryptographic accelerator processor executes the command block. (Page 3, paragraph 
39) 

The Applicant argues Blaker does not teach a memory coupled to both a first and 
a second processor. Blaker discloses a system bus controller that couples the host 
processor to the system memory and also couples the host processor and the system 
memory to the cryptographic accelerator processor via a system bus. (Figure 1 ; Page 3, 
paragraph 33). Therefore, Blaker anticipates a memory coupled to both a first and a 
second processor. 

The Applicant argues Blaker does not disclose or teach "a request unit to fetch 
and to distribute the macro security operation..." Blaker discloses a cryptographic 
processor that may distribute command blocks to the command interface managers 
associated with the execution unit which may process the command blocks in parallel 
(Page 7, paragraph 66). In addition, Blaker discloses a load command block into 
command queue using the host processor and may be processed in the background by 
the cryptographic accelerator processor. (Page 3, paragraph 41) As disclosed by the 
Applicant in the Abstract, the request unit is used to retrieve a portion of the number of 
requests from the request queue and distribute the retrieved requests to the number of 
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execution units. The cryptographic accelerator processor disclosed by Blaker, loads one 
or more operands from the system memory and performs one or more operations. 
Blaker further discloses the interaction between the host processor and the 
cryptographic accelerator processor is handled by a load command in cryptographic 
accelerator processor. A load command loads one or more operands from the system 
memory and then performs one or more operations on the operand(s) to generate a 
result. (Page 5, paragraph 47) 

The Examiner disagrees with the applicant and maintains all rejections. All 
arguments by the Applicant have been considered. It is the Examiner's conclusion that 
calms 1-34 are not patentably distinct or non-obvious over the prior art of record in view 
of the references Blaker, Bellwood and Tremblay. Therefore, all the rejection is 
maintained as given below. 



Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 16-18, 20-22 and 24 are rejected under 35 U.S.C. 102(e) as being 



anticipated by Blaker et al. United States Publication Number 2002/0004904. 



Application/Control Number: 10/025,509 Page 5 

Art Unit: 2137 

As per claim 16: 

Blaker et al. teach an apparatus comprising: 

a first processor to call a macro security operation to establish a secure session; 
(Page2, paragraph 11) 

a second processor coupled to the first processor, the second processor to 
perform a plurality of primitive security operations in response to the macro security 
operation call; (Page 2, paragraph 11) and a memory coupled to the first and the 
second processor, the memory to store a set of data generated by the second 
processor. (Figure 1, 36 and 22; Page 2, paragraph 11; Page 3, paragraph 34) 
As per claim 17: 

Blaker et al. teach all the subject matter as disclosed above. In addition, Blaker et 
al. further disclose an apparatus wherein the second processor comprises: a request 
unit to fetch and to distribute the macro security operation; (Page 3, paragraph 34) and 
a plurality of execution units coupled to the request unit, one of the plurality of execution 
units to execute the plurality of primitive security operations. (Page 3, paragraph 34) 
As per claim 18: 

Blaker et al. teach all the subject matter as disclosed above. In addition, Blaker et 
al. further disclose an apparatus wherein comprising: the first processor to call a second 
macro security operation after calling the first macro security operation; (Page 3, 
paragraph 39) and a second one of the plurality of execution units to execute a second 
plurality of primitive security operations corresponding to the second macro security 
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operation before the one of the plurality of execution units completes execution of the 
plurality of primitive security operations. (Page 3, paragraph 39) 
As per claim 20: 

Blaker et al. teach all the subject matter as disclosed above. In addition, Blaker et 
al. further disclose an apparatus further comprising the memory to store a set of source 
data. (Figure 1, 36 and 22) 
As per claim 21: 

Blaker et al. teach an apparatus comprising: 

a first processor to call a macro security operation; (Page2, paragraph 11) 
a second processor coupled to the first processor, the second processor 
comprising a request unit to retrieve the macro security operation, a plurality of 
execution units coupled to the request unit, one of the plurality of execution units to 
perform a plurality of primitive security operations, the plurality of primitive security 
operations corresponding to the macro security operation; (Page 2, paragraph 11; Page 
3 pragraphs 34 and 39) and 

a memory coupled to the first and second processor, the memory to store a set 
of data generated by the second processor. (Figure 1, 36 and 22; Page 2, paragraph 
11) 

As per claim 22: 

Blaker et al. teach all the subject matter as disclosed above. In addition, Blaker et 
al. further disclose an apparatus further comprising the memory to store a set of source 
data from the host processor. (Figure 1, 22 and 36) 
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As per claim 24: 

Blaker et al. teach all the subject matter as disclosed above. In addition, Blaker et 
al. further disclose an apparatus comprising: 

the first processor to call a primitive security operation; (Page2, paragraph 11) 

and 

a second one of the plurality of execution units to execute the primitive security 
operations. (Page 2, paragraph 11) 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
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consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

6. Claims 1-15 and 25-34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Blaker et al. United States Publication Number 2002/0004904 in view 
of Bellwood et al. United States Letter Patent Number 6,584,567. 
As per claim 1 : 

Blaker et al. teach a computer implemented method comprising: 

calling an operation from a first processor; (Page 2, paragraph 11; one or more 
operands are downloaded ...from the system memory) 

executing a plurality of primitive security operations at a second processor in 
response to the operation call; (Page 2, paragraph 11) 

generating a set of data from executing the plurality of primitive security 
operations; (Page 2, paragraph 11) and 

Blaker et al. do not explicitly disclose establishing a secure session with the set 
of data. 

Bellwood et al. in analogous art, however, disclose a method of establishing a 
secure session between client browser and a server. (Col. 2, lines 19-22). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system disclosed by Blaker et al. to 
include a method of establishing a secure session with the set of data. This modification 
would have been obvious because a person having ordinary skill in the art would have 
been motivated to do so, as suggested by, Bellwood et al. (Col. 1 , lines 56-58) in order 
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to provide a mechanism that reduces network resource demands and enhancing secure 
communication between devices. 
As per claim 2: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a computer implemented method wherein the 
set of data comprises: 

a set of decrypted data; (Page 6, paragraph 54) 

a set of encrypted data; (Page 6, paragraph 54) and 

a set of hashed messages. (Page 6, paragraph 54) 
As per claim 3: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a computer implemented method comprising a 
set of random numbers. (Page 4, paragraph 34) 
As per claim 4: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a computer implemented method comprising 
the first processor calling a second operation to establish a second secure session. 
(Col. 2, lines 49-50) 
As per claim 5: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a computer implemented method wherein 
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the secure session is an SSL 3.0 session, a TLS session, or an IPSec session. (Col. 3, 
lines 50-59) 
As per claim 6: 

Blaker et al. teach a computer implemented method comprising: 

calling a macro security operation; (Page 2, paragraph 11; one or more operands 

are downloaded ...from the system memory) 

performing a set of operations in response to the macro security operation, (Page 

2, paragraph 11) 

Blaker et al. do not explicitly disclose the set of operations comprising: 
generating a secret and a key material, creating a first finished hash for a client 
message, creating a second finished hash for a server message, creating a finished 
message; and establishing a secure session. 

Bellwood et al. in analogous art, however, disclose a method of 

generating a secret and a key material, (Col. 9, lines 2-5) 

creating a first finished hash for a client message, (Figures 3A and 3B; Col. 9, 
lines 6-10) 

creating a second finished hash for a server message, (Figures 3A and 3B; Col. 
9, lines 6-10) 

creating a finished message; (Figures 3A and 3B) and 
establishing a secure session. (Col. 2, lines 19-22). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system disclosed by Blaker et al. to 
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include a method of establishing a secure session. This modification would have been 
obvious because a person having ordinary skill in the art would have been motivated to 
do so, as suggested by, Bellwood et al. (Col. 1, lines 56-58) in order to provide a 
mechanism that reduces network resource demands and enhancing secure 
communication between devices. 
As per claim 7: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a computer implemented method wherein 
the set of operations further comprises decrypting a pre-master secret; and decrypting a 
client finished message. (Col. 9, lines 1-5) 
As per claim 8: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a computer implemented method wherein the 
set of operations further comprises generating a set of random numbers. (Page 4, 
paragraph 34) 
As per claim 9: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a computer implemented method wherein 
the set of operations further comprises creating an expected finished message. (Figures 
3A and 3B) 
As per claim 10: 
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Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a computer implemented method comprising 
calling a second macro security operation to establish a second secure session. (Col. 2, 
lines 49-50) 
As per claim 11: 

Bellwood et al. teach a system comprising: 

a first network element to request a secure session; (Col. 5, lines 30-31 , 
Bellwood) and 

a second network element networked to the first network element, the second 
network element to call a macro security operation from a first processor, (Col. 5, lines 
32-37, Bellwood) 

Bellwood et al. do not explicitly disclose executing a plurality of primitive security 
operations at a second processor in response to the macro security operation call and 
to generate a set of data from the execution of the plurality of primitive security 
operations. 

Blaker et al. in analogous art, however, disclose a method of executing a plurality 
of primitive security operations at a second processor in response to the macro security 
operation call and to generate a set of data from the execution of the plurality of 
primitive security operations. (Page 2, paragraph 11) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system disclosed by Bellwood et al. to 
include a method of executing a plurality of primitive security operations at a second 



Application/Control Number: 10/025,509 Page 13 

Art Unit: 2137 

processor in response to the macro security operation call and to generate a set of data 
from the execution of the plurality of primitive security operations. This modification 
would have been obvious because a person having ordinary skill in the art would have 
been motivated to do so, as suggested by, Blaker et al. (Page 1, paragraph 4) in order 
to allow a host processor to download one or more command and instruct the co- 
processor to execute one or more of the downloaded commands. This way, the host 
processor will have more time available to attend other tasks. 
As per claim 12: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a system wherein the set of data comprises: a 
set of decrypted data; a set of encrypted data; and a set of hashed data. (Page 6, 
paragraph 54) 
As per claim 13: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a system wherein the first network element 
to request the secure session comprises the first network element to transmit a set of 
messages to the second network element, (Col. 5, lines 30-31 , Bellwood) to execute a 
second macro security operation, and to generate a second set of data from the 
execution of the second macro security operation. (Col. 5, lines 41-53; ...the client 
opening a second secure session to the proxy Bellwood) 
As per claim 14: 
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Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a system comprising a third network element 
networked to the second network element, the third network element to request a 
second secure session with the second network element. (Col. 4, lines 65-67 and Col. 
5, lines 1-2) 
As per claim 15: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a system comprising: the first network 
element to request a second secure session with the second network element; and the 
second network element to execute a second macro security operation to establish the 
second secure session with the first network element. (Col. 2, lines 49-50) 
As per claim 25: 

Blaker et al. teach a machine-readable medium that provides instructions, which 
when executed by a set of one or more processors, cause said set of processors to 
perform operations comprising: 

executing a macro security operation at a first one of the set of processors; 
(Page 2, paragraph 11) 

executing a plurality of primitive security operations at a second one of the set of 
processors in response to the macro security operation call; (Page 2, paragraph 11) 

generating a set of data from executing the plurality of primitive security 
operations; (Page 2, paragraph 11) and 
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Blaker et al. do not explicitly disclose establishing a secure session with the set 
of data. 

Bellwood et al. in analogous art, however, disclose a method of establishing a 
secure session between client browser and a server. (Col. 2, lines 19-22). 

Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to modify the system disclosed by Blaker et 
al. to include a method of establishing a secure session with the set of data. This 
modification would have been obvious because a person having ordinary skill in the art 
would have been motivated to do so, as suggested by, Bellwood et al. (Col. 1, lines 56- 
58) in order to provide a mechanism that reduces network resource demands and 
enhancing secure communication between devices. 
As per claim 26: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a machine-readable medium wherein the set of 
data comprises: 

a set of decrypted data; (Page 6, paragraph 54) 

a set of encrypted data; (Page 6, paragraph 54) and 

a set of hashed messages. (Page 6, paragraph 54) 
As per claim 27: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a machine-readable medium wherein the set of 
data comprises a set of random numbers. (Page 4, paragraph 34) 
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As per claim 28: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a machine-readable medium comprising the 
first processor calling a second operation to establish a second secure session. (Col. 2, 
lines 49-50) 
As per claim 29: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a machine-readable medium wherein the 
secure session is an SSL 3.0 session, a TLS session, or an IPSec session. (Col. 3, 
lines 50-59) 
As per claim 30: 

Blaker et al. teach a machine-readable medium that provides instructions, which 
when executed by a set of one or more processors, cause said set of processors to 
perform operations comprising: 

calling a macro security operation from a first one of the set of processors; (Page 
2, paragraph 11) 

performing a set of operations at a second one of the set of processors in 
response to the macro security operation, (Page 2, paragraph 11) 

Blaker et al. do not explicitly disclose the set of operations comprising: 
generating a secret and a key material, creating a first finished hash for a client 
message, creating a second finished hash for a server message, creating a finished 
message; and establishing a secure session. 



Application/Control Number: 10/025,509 Page 17 

Art Unit: 2137 

Bellwood et al. in analogous art, however, disclose a method of 
generating a secret and a key material, (Col. 9, lines 2-5) 
creating a first finished hash for a client message, (Figures 3A and 3B; Col. 9, 
lines 6-10) 

creating a second finished hash for a server message, (Figures 3A and 3B; Col. 
9, lines 6-10) 

creating a finished message; (Figures 3A and 3B) and 

establishing a secure session between client browser and a server. (Col. 2, lines 
19-22). 

Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to modify the system disclosed by Blaker et 
al. to include a set of operations comprising: generating a secret and a key material, 
creating a first finished hash for a client message, creating a second finished hash for a 
server message, creating a finished message; and establishing a secure session. 
This modification would have been obvious because a person having ordinary skill in 
the art would have been motivated to do so, as suggested by, Bellwood et al. (Col. 1, 
lines 56-58) in order to provide a mechanism that reduces network resource demands 
and enhancing secure communication between devices. 
As per claim 31: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a machine-readable medium wherein the set 
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of operations further comprises decrypting a pre-master secret and a client finished 
message. (Col. 9, lines 1-5) 
As per claim 32: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Blaker et al. further disclose a machine-readable medium wherein the set of 
operations further comprises generating a set of random numbers. (Page 4, paragraph 
34) 

As per claim 33: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a machine-readable medium comprising 
creating an expected finished message. (Figure 3A and 3B) 
As per claim 34: 

Blaker et al. and Bellwood et al. teach all the subject matter as discussed above. 
In addition, Bellwood et al. further disclose a machine-readable medium comprising 
calling a second macro security operation to establish a second secure session. (Col. 2, 
lines 49-50) 

7. Claims 19 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Blaker et al. United States Publication Number 2002/0004904 further in view of 
Tremblay et al. United States Letter Patent Number 5,925,123. 
As per claim 19 and 23: 

Blaker et al. teach all the subject matter as discussed above. In addition, Blaker 
et al. further disclose an apparatus wherein: 
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an execution queue unit coupled to the microcode unit, the execution queue unit 
to queue the plurality of primitive security operations; (Figure 1, 44 and 46; Page 3, 
paragraph 34) 

a plurality of primitive security operation units coupled to the execution queue 
unit, the plurality of primitive security operation units to perform the plurality of primitive 
security operations; (Page 3, paragraph 39) and 

a bus coupled to the plurality of primitive security operation units, the bus to 
transmit data. (Figure 1, 24; Page 3, paragraph 33) 

Blaker et al. do not explicitly disclose an apparatus comprising a microcode unit 
to translate the macro security operation into a plurality of primitive security operations; 

Tremblay et al. in analogous art, however, disclose an apparatus wherein the 
one of the plurality of execution units comprises: a microcode unit to translate the macro 
security operation into a plurality of primitive security operations; (Col. 3, lines 21-27) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system disclosed by Blaker et al. to 
include a microcode unit to translate the macro security operation into a plurality of 
primitive security operations. This modification would have been obvious because a 
person having ordinary skill in the art would have been motivated to do so, as 
suggested by, Tremblay et al. (Abstract) in order to provide a dual instruction set 
processor that is capable of executing instruction in two different instructions sets from 
two different sources. 
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8. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shewaye Gelagay whose telephone number is 571-272- 
4219. The examiner can normally be reached on 8:00 am to 5:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Shewaye Gelagay 
10/14/05 ^ 



MATTHEW SMITHERS 
PRIMARY EXAMINER 



